Broadband Tech > Security > Security > CC companies threaten Discovery over Mythbusters Show

CC companies threaten Discovery over Mythbusters Show

Isn't this at least a couple of years old? I remember a post from way back on this.

reply to state

reply to dvd536

reply to state
No need for the shredder or keeping the cards locked-up. Simply place the card on a hard, flat surface (e.g. concrete garage floor) and hit the chip a few times with a hammer until it flattens out. This renders the chip useless, but the magnetic strip still works of course. You can usually discern the slight bump where the chip is on the card, but if not you can search for images of chip locations.

I've also used the hole-puncher method, which works well too. The downside is that it leaves a hole in your card. Then again, that hole often gives me a chance to explain to the clerk why it is there, thus raising awareness.

reply to TomR_in_MI
It doesn't help when they're pushing for a newer application of RFID called NFC in smartphones and other products.

reply to Doctor Olds

reply to state
It may be old news but it's still very relevant!

reply to kickass69

reply to state

reply to kickass69
At least on smartphones you have to confirm that the purchase is authorized, you need to tap your screen to let the transaction to occur.

Since CC normally carry zero liability for fraudulent purchases, the ones who would appear to suffer the most from RFID insecurity would be the CC companies. So why do they use it if it's so insecure?

Because they DON'T suffer. The merchants that accept cards are the ones that suffer from fraud - the issuers actually make money on it due to enormous chargeback fees and such that merchants pay. When fraud occurs, the merchant (the store the perp purchased from) pays out processing fees, chargeback fees, the original sales price, plus has already lost the original product/service that was purchased. The card issuers pocket the processing & chargeback fees and walk away smiling.
--
»www.FlightSimWorld.com
Remember, there are old pilots and there are bold pilots, but there are no old bold pilots.
Flight Simulator

Very good point. Didn't think of that angle.

reply to IIIBradIII

reply to state
Did it occur to you that RFID technology might have changed for the better since 2008?

Do a search here. There are more relevant threads than this old article. A major national bank sent me one of these cards (my first of this type) when it was time to renew the card last year. I first did a knee jerk reaction and was going to call and demand a regular card, but then I started researching the subject and changed my mind as the card I was sent is cutting edge and I think it is safe. But I won't be using it until I have a balance transfer paid off. When that time comes, I will again research the latest information on this issue.
--
When governments fear people, there is liberty. When the people fear the government, there is tyranny. Thomas Jefferson

On the topic of RFID, I've always been wondering about something.

When I use an RFID chip card, I enter my PIN, and the terminal instantly says whether or not I've entered it correctly. Only then does the POS phone home to the payment processor and verify there are funds available.

Therefore, I would think it would be trivial to brute force a PIN since there are a maximum of 10^4 combinations with most banks. (A rare few allow for PINs more than four digits long.)

One would think it would have been just as easy - and far more secure - to implement a system where the entered PIN is sent to the payment processor for verification.

Am I missing something here or would it really be that easy to use my Visa if it were stolen?

reply to Snowy
A follow-up question: are the rules for fraudulent swipe/sign transactions the same as the rules for fraudulent chip/pin transactions?

Let's say someone looks over my shoulder as I enter my PIN, then mugs me for my Visa, and uses it before I can cancel it. Who pays?

We only do eCommerce and MOTO, so I've never actually accepted a chip card from a customer.